$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.mft File: 0E927CE9CFAE01959701D8BAA31AA108D9A640F6.mft (raw, json) Hash identifier: 50spGkef5OROjUrFRbVhY1mneHvWWCQ6RTUFlU2wgw8= Subject key identifier: 0F:93:50:9D:9B:B0:79:7E:0B:7B:A3:46:5C:E4:75:F4:D9:CC:EC:04 Authority key identifier: 0E:92:7C:E9:CF:AE:01:95:97:01:D8:BA:A3:1A:A1:08:D9:A6:40:F6 Certificate issuer: /CN=0E927CE9CFAE01959701D8BAA31AA108D9A640F6 Certificate serial: 4CFB4756221200B0E9DDA306083F915232CBBF0A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.mft Manifest number: A7 Signing time: Fri 04 Sep 2026 06:34:16 +0000 Manifest this update: Fri 04 Sep 2026 06:29:16 +0000 Manifest next update: Sat 05 Sep 2026 07:48:16 +0000 Files and hashes: 1: 3130332e3233312e38312e302f32342d3234203d3e20313331373335.roa (hash: Pp4p1IAwL6T/SUuRHLsPL1o2X/hw7FiM+dsJ0iekdE8=) 2: 3130332e3233312e38302e302f32342d3234203d3e20313331373335.roa (hash: Si+I+kPmeWkzvO8zwLh244+U9aO/cSZUp2EBTlhcW1Q=) 3: 0E927CE9CFAE01959701D8BAA31AA108D9A640F6.crl (hash: eBEkBA6Hed4pEDR6G8V3SqUzMJJmHX21PB3WLxBEbug=) 4: 3130332e3233312e38332e302f32342d3234203d3e20313331373335.roa (hash: OsAoJbYittbq+gZll27kuO9hviTpRYTbYAhazIaxU6I=) 5: 3130332e3233312e38322e302f32342d3234203d3e20313331373335.roa (hash: EdEGFXLSGBP0MFU7fBfQCb+Ije/hW5JPZPkjvdhCXtQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.crl rsync://rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Sep 2026 04:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:fb:47:56:22:12:00:b0:e9:dd:a3:06:08:3f:91:52:32:cb:bf:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E927CE9CFAE01959701D8BAA31AA108D9A640F6 Validity Not Before: Sep 4 06:29:16 2026 GMT Not After : Sep 5 07:48:16 2026 GMT Subject: CN=0F93509D9BB0797E0B7BA3465CE475F4D9CCEC04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:30:4e:47:01:a3:dd:26:27:44:c5:1d:12:8a: 19:45:5d:c7:d0:e4:f7:73:00:10:69:76:9b:08:f2: 45:e0:dc:88:33:be:7c:8e:71:1c:fc:1b:10:f5:4d: e3:08:cf:6a:da:59:72:b0:03:b8:4f:65:69:94:01: 57:81:cb:58:3d:ce:28:ff:5e:c9:fa:84:5c:12:46: 7d:f0:48:a5:eb:5b:d7:a8:6b:b4:04:91:ba:22:0e: a7:84:2c:74:4a:ed:5a:bf:93:d4:63:31:75:ca:7c: 80:be:08:c8:4c:ad:da:f1:33:cc:44:25:23:bd:2c: 24:aa:fa:1c:9d:8b:68:dd:47:b9:ed:6e:91:38:9d: c9:2c:7d:29:ad:ab:05:a8:f8:39:69:27:36:09:0a: 57:0a:9f:85:10:08:8e:6a:a5:77:af:61:a0:97:5c: fb:ff:0b:dc:a2:59:cf:7d:e2:06:84:62:2c:ee:86: d5:27:ef:41:4f:7e:98:02:70:35:b0:e6:01:d2:60: e2:56:f4:95:e9:8f:05:f1:82:3a:df:4c:f1:a2:8d: f6:4c:05:ba:13:d3:68:ab:02:0e:87:bf:60:db:cd: a1:76:b8:32:88:ae:c9:f1:81:70:60:0d:7f:d5:16: b5:ee:ef:14:14:38:35:a3:a7:e5:a8:db:5a:31:f9: 5e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:93:50:9D:9B:B0:79:7E:0B:7B:A3:46:5C:E4:75:F4:D9:CC:EC:04 X509v3 Authority Key Identifier: keyid:0E:92:7C:E9:CF:AE:01:95:97:01:D8:BA:A3:1A:A1:08:D9:A6:40:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:d2:41:8a:74:b8:38:59:83:e4:62:f1:e5:f4:b4:db:6f:03: 70:a8:8f:9f:b0:34:7d:64:a0:c0:39:33:d9:53:6d:ba:a1:5e: 8c:cd:2c:80:51:5e:15:f9:d2:9f:26:18:2e:23:e2:c5:84:ff: b3:56:75:e9:9f:b3:a6:e9:7a:04:a4:36:0c:7b:c6:3f:d6:83: fe:28:61:b9:86:1e:46:bb:e3:15:5d:8e:ea:5b:db:8a:30:0b: 1e:ed:39:55:42:09:4c:26:9e:42:70:f7:95:38:bc:ed:2d:93: d7:7a:4b:a3:b3:50:28:cd:1c:97:f2:5b:02:9f:40:7e:f2:10: c7:c6:5d:39:7d:25:c8:ff:91:7a:93:c0:a1:e2:00:a7:3a:2e: 16:48:f5:7b:43:4f:c5:f1:14:ce:c0:40:05:fa:a2:cd:6b:1a: 5a:44:a2:8e:55:3c:a6:7f:68:e0:1c:44:d1:c1:2a:17:a8:01: df:3c:43:74:42:00:6b:81:19:ad:fe:2e:c2:b1:97:3a:4a:1f: d6:71:a8:51:a2:f1:63:ca:c1:a6:48:eb:c1:4e:95:61:49:4f: 8f:73:45:fd:7f:6c:49:6f:e9:a9:b9:9c:e8:31:20:d8:07:81: 55:66:1c:48:21:d1:d3:d5:ee:c4:a5:68:7f:f7:1c:63:9a:ff: ea:29:dd:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTPtHViISALDp3aMGCD+RUjLLvwowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU5MjdDRTlDRkFFMDE5NTk3MDFEOEJBQTMxQUExMDhE OUE2NDBGNjAeFw0yNjA5MDQwNjI5MTZaFw0yNjA5MDUwNzQ4MTZaMDMxMTAvBgNV BAMTKDBGOTM1MDlEOUJCMDc5N0UwQjdCQTM0NjVDRTQ3NUY0RDlDQ0VDMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFME5HAaPdJidExR0SihlFXcfQ 5PdzABBpdpsI8kXg3IgzvnyOcRz8GxD1TeMIz2raWXKwA7hPZWmUAVeBy1g9zij/ Xsn6hFwSRn3wSKXrW9eoa7QEkboiDqeELHRK7Vq/k9RjMXXKfIC+CMhMrdrxM8xE JSO9LCSq+hydi2jdR7ntbpE4ncksfSmtqwWo+DlpJzYJClcKn4UQCI5qpXevYaCX XPv/C9yiWc994gaEYizuhtUn70FPfpgCcDWw5gHSYOJW9JXpjwXxgjrfTPGijfZM BboT02irAg6Hv2DbzaF2uDKIrsnxgXBgDX/VFrXu7xQUODWjp+Wo21ox+V49AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD5NQnZuweX4Le6NGXOR19NnM7AQwHwYDVR0j BBgwFoAUDpJ86c+uAZWXAdi6oxqhCNmmQPYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGE0OTNiZTEtZjA2NC00OWU2LTk0OWEtY2IzZWNiZmM4ZjQ2LzAvMEU5MjdDRTlD RkFFMDE5NTk3MDFEOEJBQTMxQUExMDhEOUE2NDBGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRTkyN0NFOUNGQUUwMTk1OTcwMUQ4QkFBMzFBQTEwOEQ5QTY0 MEY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGE0OTNiZTEtZjA2NC00OWU2LTk0 OWEtY2IzZWNiZmM4ZjQ2LzAvMEU5MjdDRTlDRkFFMDE5NTk3MDFEOEJBQTMxQUEx MDhEOUE2NDBGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAADSQYp0uDhZg+Ri8eX0tNtvA3Coj5+wNH1k oMA5M9lTbbqhXozNLIBRXhX50p8mGC4j4sWE/7NWdemfs6bpegSkNgx7xj/Wg/4o YbmGHka74xVdjupb24owCx7tOVVCCUwmnkJw95U4vO0tk9d6S6OzUCjNHJfyWwKf QH7yEMfGXTl9Jcj/kXqTwKHiAKc6LhZI9XtDT8XxFM7AQAX6os1rGlpEoo5VPKZ/ aOAcRNHBKheoAd88Q3RCAGuBGa3+LsKxlzpKH9ZxqFGi8WPKwaZI68FOlWFJT49z Rf1/bElv6am5nOgxINgHgVVmHEgh0dPV7sSlaH/3HGOa/+op3aw= -----END CERTIFICATE-----Generated at Fri Sep 4 15:17:35 2026 by rpki-client